Administration Guide

How to add credentials

This guide shows you how to add a credential to an Audit Service so that it can authenticate against the systems it audits. Credentials are added per Audit Service; each service maintains its own pool.

For cloud worker execution, use the cloud credential procedure below. Cloud credentials do not require an Audit Service.

Add Audit Service credentials

Prerequisites

  • You are signed in as a Site Administrator.
  • At least one Audit Service is registered in the Site (Admin Center > Tasks and services > Audit services).
  • You have the secret material on hand — Windows password, SSH key, SNMP community string, cloud access key — captured from the source system.

Steps

  1. Navigate to Admin Center > Tasks and services > Audit services.
  2. Click the row of the Audit Service you want to add the credential to. The detail modal opens.
  3. Switch to the Credentials tab.
  4. Click the button for the credential type you want to add. The form opens.
    • Windows — for WMI / WinRM audits of Windows endpoints.
    • Linux and macOS — for SSH-based audits of Linux servers and macOS workstations (one type covers both OS families).
    • Hypervisor — for VMware ESXi.
    • SNMP — for SNMP v1, v2c, or v3 of network devices and printers.
    • AWS — for cloud audits of AWS accounts.
    • Azure — for cloud audits of Azure subscriptions.
    • Google — for cloud audits of Google Cloud projects.
  5. Fill in the required fields. The exact field set depends on the type — see Credentials Reference for the per-type schema.
  6. Click Save.

Verify

The new credential appears in the Credentials grid of the Audit Service detail with its Title, Type, and a lock icon in the Has password column.

To verify that the credential actually works, trigger an ad-hoc audit against one device that the credential should be able to reach (Inventory > Devices > (device) > Audit now) and check the Audit log for a successful run.

Important: AlloyScan does not currently provide a per-credential Test button. The first authoritative signal that a credential is wrong is an audit failure for the affected target.

Add cloud credentials

  1. Open Admin Center > Settings > Cloud credentials.
  2. Create a credential and enter a descriptive Title.
  3. Choose the provider and enter its required authentication fields. See Credentials Reference.
  4. Save the credential.
  5. In the provider segment's settings, choose AlloyScan cloud worker and select the credential.

For Google Cloud and Google Directory, you can import service-account JSON. For Google Directory, enter Delegated admin email separately.

Manage cloud credentials

Open a cloud credential to edit its title or replace secret values. Unchanged secret fields retain their stored values. You can disable and re-enable a credential; select an enabled credential for cloud execution. The provider is fixed after creation. A referenced credential cannot be deleted.

Rotating an existing credential

The Admin Center does not display stored secrets, so rotation means editing the existing entry with the new secret rather than reading the old one back. Open the credential row in the Credentials tab, replace the password / key, and save. Subsequent audits will use the new secret.